PKSA-324d-pqmd-hptz Security Advisory
-
[CRITICAL] CVE-2019-10913: Reject invalid HTTP method overrides
PKSA-324d-pqmd-hptz CVE-2019-10913 GHSA-x92h-wmg2-6hp7
Affected package: symfony/http-foundation
Affected version: >=2.7.0,<2.7.51|>=2.8.0,<2.8.50|>=3.0.0,<3.1.0|>=3.1.0,<3.2.0|>=3.2.0,<3.3.0|>=3.3.0,<3.4.0|>=3.4.0,<3.4.26|>=4.0.0,<4.1.0|>=4.1.0,<4.1.12|>=4.2.0,<4.2.7
Reported by:
GitHub, FriendsOfPHP/security-advisories